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(54) ACCESS CONTROL METHOD FOR NETWORK SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To attain a more flexible u*m<n6* 
operation of a network by performing integrated and 
unitary management via an access control server for the 
access control processes which are so far carried out by 

a work server, a DB server, a groupware server, etc., in a 

conventional ACL and also grasping the temporary f 
constraint set for the use of a network system and the \^ 
user access state by means of the access tickets. 

SOLUTION: An access control server 50 checks the j 
access authority of a user to a work server 6 based on / 
the confirmation result of the users certificate acquired "^"^^ 
by an integrated authentication server 2 after the user is ^ s**v-<7 e:c j 
authenticated or when the work requests of the user are — ' 

transferred to the server 50 from the clients 8 and 20. If j— L ( MAt4t . jVn . A „^, 1 ) 




the access authority of the user is legal, the work ' I x - 



requests of the user are permitted to the server 6. In *rs**srsw i 

this case, a fact that the communication contents are 
never shown to the outsiders is guaranteed. 
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1 

SftS««t-yt, * <t tftfci— • tf a* ic 7 ^ -fe 

XT 5*[B&#T -5 #>5#>£«gSgT 3 7 -fex fWfflIU— 
y«s, tBSlcamnJfi&ft^-y h7-?->XfAT©7i' 

a— tfftBffiL&ft. !f*«**T*^5 

•f 7 > h 6 ^7 * -fe X fMffltJ— A* K*# b T^3-- 

T-5X^-y7<»:, 

;^<D3.— *fa>mmm* *jt * x ^ >y 

XffitJ$P?jft. 

^-feXfisffi^ 75 'J 3.— tf*s#-y— AfC7^ 

-A© ID, ga-f CD ] D, 7^-feXSiJPUX K 3S 
fli©Wtt*fr, ^7^-fcXfMfPtJ— /t©»**MI<¥#5 
*«KSft«7^-feX^^ry Mf«ft=WfflUT. 3—- tP© 

T^-trX^W^x-y^Srff 5*>y h7-^yXfAT 
© 7 i7 -fe X ©J W7f ft C * V > T . 

75 U CiJUtTSX^-y 7<fc, 

S7^-bX§iJI95-f 77'JT. g7^tXf^7 M»£8 
Sfflt^TgpL— y-*©|g A*^©7i?-fe:X*g|g?:r>y 

fc*£rfc«. tfcilfgU— A'JcKa— tf©Hi5^i^7 
^irX^-y h1f$8£ftj||T£Xer"y7<i, 
«lftig+f--AX\ Ka-+H;:<fc«>7 ? -^©7^-teX#l 

■fe X ffifl 5 -f 7 5 U (C 2«T -5 X -y 7 £ . 

&7*-feXffl»5-r75UT\ K7^-feX^-y Mf$g 
©rt^£5tlgU Sa- 9-*©7?-fc:Xtti!££5Px-y;7 

flnbfc7;7-t?X5F^.y h«**tt7^-feX«IW-y— A*(c 
->X^-A-e©7^-irXfiJ^I73te. 

immm3] m#mi $.tz\z2\ztEme>*v h?— * 

v-X^AT©7^X$OT75ftl:::fc^T, 
WfB7^7-feXftiJ«-9— A, £5-f 7> h**©7^7-feX 

■y M»«t3SS«T*IRC, S«©S*#£Wcte^7 
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^7-feX^'T-^ h1fS8©F^£il/!±ft^<£3&iIT£;r .t: 
H I 7-^->X^A-C©7i7-feXfiJW7j 

ft. 

[^©ff&MftiaBJi] 

[0 0 0 1] 

[*W©KT*8E«#»] *5gHj«. ggfEt}— a\ 7^ 
•feXSflffll+h- A*, *3<fcOt^5-f 7>M:MLT, 3E^S 
£#JfflbTj£*£*>y h7-^yXfA-ea- ifBafctsJ: 
tf7#-feX8iiJ$|l£fT'5*>y i^Xf AW^t 

/0 XflBflWftfcWr*. 

[0 0 0 2] 

[«£3l?©&flS] -f >^-*-y hfflfRCff^t+aUf 

>*-*-y HM>h7*7 NSSE-S-TaKIIli— A' 
ttm^TabO. J£«*y h^-i'J'XfATa-if*- 
tg^HU $^tcm^WtC7^-feXffl^^ff 

WHTSTjfttt, ^&©j£«*>y hU — i7->X5=-AT« 

5 'tttH^TfeD. tF©*-y h>7-^->X 

fA1>i8i8*i:J6CT, #*»-y--A^(HgiJ(cn— tf 
©7^-feX3iiJfP2:fT'5 £ <h left -2> '©*£ 

[0 0 0 3] *tli^Att, *^i05t(C2o©jf* (# 
I¥9- 7 6 9 5 4§ (*IA) , *3«fct>'#^¥9-l 
50 7 3 5 3 2f (5feggB) ©&BJ»S*5 J;rJC0ffi#M) * 
ffoT^S*^ JtlAftt. aS^Bffi-y— A*Tt£B^|iE(C 
iDa- tfSKIETS^i:t<fcD» «®/U7-Hl: 

^5-f 7> htSE^-BIE-y-— A©5R^T?3.— 
Mt57^tXlIS:ML. £ it t£T 3 C <fc lc<fc 
Da- tf©^iE/ft7i7-feX^«E : Sr^x-yi7bX^^. — 

b» a— y*t1fiJS:©iEHfleJCJ:DKD5lirS:ff om^\z 

^ -y— ATlft©^IEaJStcJ;0a— »f*BKb, ^9 

S«t5l:LTV»5. 5t^B©7jiC«. iK-&BiE-y-— A*T 
[0 0 0 4] 

so mwrfm&L<av£T2>wkm] m&o^viz, m&M 



3 

SrtSttT. affi©^*#P^T. «*.«-fe*;i.7»m9-f' 

Id* 0<J tzVWT %> 7 1> -fe X ftW-y— A* tffc-fe =¥■ a U 
[0 0 0 5] *^BJ©g6<J«. £©<fc-5&fi£* 

7-^7 ->X^A£ 1 f£f9r>^ e.i'tfltl) £ 
dtfCfc-S. Sit, *«Bj»ffi»SW«. 72-tZfflW 
*U ^©«^K&®£&£i!3fa:7^-feX*d®Hi-- A£ 

[0 0 0 6] 

•tfa^ff-f t> hji^y^-fe^fflffli-y— a* test 

A^©7:7-feX*iPg©^x-.y^£:fTt^ 

nti***- ■ y©in»B**iiFRr-r & ji t * 
* ^ 7 > h ic t ^ -fe x m m ? -r y j * r w- * »£■ t- 

fct, T^-feXSMffl-y-— A I D, a-+FlD, 7^-feXfW 

Xfy-yHii^JffltT, n.~ ^©T'^-feXjglg^ 

(OT^-feXflffl^-l'^'JT. BflaETi/-feX?^r>y h 
UTtta— tfO*»-9— /^07 ^-feXtttPE^x y 

<hflfll2T^-feX9 L '5r^ hSKSSTa^^s/^i. (2)* 
&•«*■— A"?. Ma- yMCcfc^-^WT^-feXfiK© 

^■fc^ttH^-f^UKSI^-rsx^y^i, (3)»7 

5 «t 38 U T K 3. — tf © 7 -fe X * 9- x y i7 f -5 X ^ 
7 7"t, »7^irXtt«K:IHIIl*t*-3&«^Ctt-fe*3. 
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[0 0 0 7] 2Z\Z. #fSl|H©7*-feXi0»;£8jT«. 
7^-feXfWffll-tJ-— A\ i?7-i7>h<D7?±7>mW : 7 
<i 7*7 U A £ © |H!T?atS« $ tl5 7 * "fe X 

ckD, £T©1*-A^©7^-teXfWf?£fT3:^£Ji3ft 

X t- ATa- tfg|EStJ!7 ? -feX MfV £ff 5 RffiU— A* 

fg l/fc«^BK*- A i ©a»**fflT « 7^txan 
M^MttLT^s. c:n(cj:o> tKffc-y— A^- 
rS"*— X (DB) -y— A\ #)V— y^xTit— A^t. 
«E*T1iACL (Ti'tXWJXH TffoT^fcT 
ft^MWSlt. 7^tXfflW- ATiU'J'BUK-Tt; 
'gS-TSClt^T^, Sfc7^-feX?y-> 

H~ tf©Tf -feXttM2:fflM-r^Ci:diT#. 

[0 0 0 8] 

M^yh7-f->XfAll:H «Sro^7-f7>h 

tE-y— a 2, -fe^u^nm^s-rs-y— /\*3, t 

i'tXMW- A 5 0, I^-A6,DBf-n5, ^ 
5(7 JU- T^xT+J-— A'4, Ifit-A'17, *3J:t;iEBJ 

tE5!ff-y— a'i 8 ^©#-9— /w^tt^ti*. 

DBt- A5i5<fctfil&-9— A'6tt. ^7-f7>h8^ 
AT?*S. Sfc, ^-^717^411 9=?17 

y h 8©^ ^-;K026a«*atu fco. a.— y-'©x 

^r>?3.-;i/Sr^ : aLfc0-r-5-9--A'Ta&-5. — fffl& 
Sl^y h>7 — ^^X^A9ttt, i7 5'f7 7 >h2 0^ 
M$nT*30. ^5-f7> h 8©a— tft^^-f T> h 
40 2 Ott, ^BcOSIffflFW^roJIRSaEWaESffl^T 

7^tXffli7-1 , ^7 l J 5 1 t-fe + ^Tam^-f 7"5'J 

A2 0i§D-/U, 5, 6, 5 0 (C |BI D 5> -f ^7 U 
[0 0 0 9] -fe + a. 'J x-r A« 3 tt. 

50 JCi;*:fEBJlfE©1ff8£"g-tf:a— if ©|g|EtS«*»eft*-fe 



5 

o.-lfCDDBlJ-— A5 43J:«IR»1t—^6*fctt 

a», tt^Btt*-/i2^a.— ifoBKfflaojaEfi-cfi 1 

<7)*^6ACL)S:ttaT^irX«J!IU-y— 0 fcjKt*<fc 
i^STSCtfe^IiBT*?), T^irXflfffllt 
- A 5 0 **Ifi»HSrfBlt— A 3*6ACL *BtfTT Z> £ 3 

[0 0 10] H2lt *«93£i5ttSACL*Btf#?-£ 

ity-^r>Xft-hT*^ 0 02 (a) <Dis— tr> 
*^*-hT?H\ t*a7ii7^^5U 5 2#*:i— If 
*BIEUfc«(C, 7^ir*SJWlt--A5 0l:a- tfOT 
^X«R©*Bg*&fT^ 7^i:xaW-A5 0 
tACL*S*TS«iaffilSr*bTl^, * 
fc, M2 (b) Oy-^r>X^t-M1t 9 "y-i T> 

3t<*n&B3MC* ^K^rL— if<DT^irX*ia^WBffi* 

©WB«*3&^6rL-if(OK*»*— A^<OT^'feX*IB 
O^xy^ftff^T^S. ^Ttl\zLXh, ytt-txm 
ffllU— n5 0lt *-A3A^5l»l«:ACL««Sffl 
t^T, n— If *tD Bit— A 5 45 £tf SIRlt— A 6 

JdETSit- A"C»£. J£«*iy H?-^ l o \z\t* ^ 

^7-f7>h ->XfA 2 0**j£«*!y H *7 — ^ 1 0 £^ 
UTBtgifttfiWB-Kltt, fflE9Jffi*fr1t-A 1 8»*H 

[0 0 11] ft: 45, ^r-Y l/^y HJIt— A (HS«WS : & 

t^u^t— >a >©#aE»Bf*«a-r*u— A) £P¥« 

ASrEHL/T, ^ £ Kit— A 3 <0* $B£^T IT 
t^Tfe*^. £<z>«£\ ^<T> h 8&J:tP&«1t- 
Att, Avn>, ^-^^-S/aVft^tMMgfflag 
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££tC, ^5^7> h 8*J;tf#«1t— Afc 

<k ^ o »immmi&&±. \znmtznrz n 

7> h 8*5ct«»aiJ-— Aojaasff ^ 

> r* 8_hC0n>hfjL — ^7'Py , 7AT$>D> T^-feXM 
0 ^i8*-/t 6 a: 2 tMt a u t »: J: 

M5-f^7'J5 2tt, ^7<7>h8±^Si1j-n 

^7^f7>h8 Stctef&feli**;/ h7-^yXfA9 K 
mffi2tl2>>?7'(7>b 2 0*>&ffi9Iffi<©***A;*Jb 
T, #J*tfDB1t-A5K:ni>'-f >T£<h, Ifr&Bffilt 
—A2 **IEKiE<DWB*:fT 3*** £<Z>8E93IE*:JBH;fc:S 

^mz-D^xu, mjfi<ojfeK^^A*#fl8-rntfws^ 

^ [0 0 1 2] H2 (a) KH\ a.— *f1fli7 5't 7> N 8 
^6Di/-f >«rc-fe + j.7iifi7-f 5 2, 7£-fe 

XMH^-Y^USL T^irXfWWlt— A5 045<fctf 

£ 0 :i— if l ite. ^77<7> h 8(£>3^T£n— IfB 
SESiffi (11a) IZ I C# — Frt©SE91BE3 0tf>1f?B£: 
A^Jt^utC^O (lib) , £|g*!y h^-^X 

1 fcn^-f >-T^o n.— - !f<Z)BsB&afc^^T«* 
jlfiT^^CDir^n-yM«^-r^^U 52^1 C^7- 
tf 1 0O««SBIBb. a** 

on— ^ 1 i©iEatt^B«>'&nit»tt, ^^<r>h 

8±07^-feX#J«l7-f ^7 U 5 l^tEBJSE3 0 Offi » 
€rfflV>T, n— tfl 1 ©7i7-feX*ISSrBSB'rs, El 2 
(a) fc^TJ:^tc, T^irXftlffll^-f ^7 U 5 2 tt, 
^ T^ir^*J«U— A5 O(C*fLTlE0^IiE3 0<Dmn&m 

mrz> die) . cn\z&o, Tzuxmrnv-^s 
o\t, mmm3 o^it^^stcit- a 3 \z»m^nx^ 

*n-lf 1 lC07^"feXW»UX h(ACL) 7 O^rA^ 
(lid, lie). 
[0 0 13] ^JAtf, It—A 3 **LD A P (Lightweight 
Data Access Protocol) tcS^< V Ult— 

*^Jl^(Ct4, 7^-feX$ffl1t--A5 O^LDAP^y 
P ha;i/JcS-^€lt- /N + 3 £««<0K£it-*fT'5» LD 

50 mmirn&Wt>frtfcZ>o ^IT, ACL70^$S: 
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if 1 h^—^X^A 1^0)7 ^-t?X$§EB 

> h 8«<87^XfHW^<:/^U 5 l*t:i— if l 1 ft 
tt<0*MB»!iIiffi*«5*l/ (llg) , a— ifl 

t!X*ff5 (llh) . &i3, 7% 
izXIWWif— /X5 0 <h7^tX$Jil7^y7U 51^(7) 

m<z)a«»4-fe*3.7a«9-f s 2<z>«fBfc:j:9# 

7< ^7 U 5 2 ©iairt*l:^^T«, 5teK5SI8A*# 

[0 0 14] — 0 2 (b) Ttt* #^-f7>h8£> 
a— tf©«i»»*3&«T^-feXSI»-9— A 5 OtcKiH^ti 
7#izXfWWi*—A5 OTRri— ifOffiWiiEG) 

(c (10 a) . ir*;x7»«7<:/^U 5 2«a~ifB 

mmmz^L dob) , 

c) . IEHJIE3 O^lf^^fiJfflbT-fe^rciTafi^-r^ 

mz, zzt-iyy v s±<D7^±:^mm^^ 5 1 

H**B"r*. 02 (b) tc^TJ:3tc. 7^-feXHffl) 
BJ§iE3 0 (10d) o 30 

±xmmv-^ 5 oumwm 3 ocDmm&mz, v—n 

3 ttMrt^tlT^iS^.— if 1 lW^tXHfl'J^h 
(ACL) 7 0^AfS*t§ (lOe) . f IT, A 
CL 7 O<0rtS£«BT£ (ACL 7 0 

e) , 7^t^ftHI1t'-A5 0H ZL-ifl ICOlfc** 

7^^zxmw^—^s o^^mm^nx^ 

TcAC L 7 O^tif^ (ACL 7 0 f) £S(^ ?5-f7 

mmm&<Dm^&%wtMm*)S&?z> dog). ^ 

CO 0 1 5] H3H ^m\zm^Zft%ACLM7£<D 

ns*«, rL-iff»«C!)M*fRfJc#EjEff***/hlB^-r* 
TctblZ. 03 (a) fc^-Tcfc^tca— if**7 1 
if*IB*«7 2, *3<fctf7#-feXW»*«7 
HJft^SiJ^-^ibTflfaL/T^*. 3.-if««7 1IC 
fct, 0 3 (b) fcjST«fc3Klfe*l*J*y b*7-^ IrtT 
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i/—(VMfe\z4£Oo Site* 03 (c) \Z^T<£3\zzl— 

*f\zM-?z>^<Dm<Dmnm^mm. mmm^xit 

n*. il— if|BiHt»« 7 2 1:11, 0 3 (d) fcjR-Tcfci 
jc^-iftrL-if<o*iE©»jiS*tsastiTv^. #1*. 

fcta— if£A0, Al, A2, A3£^3*ffi#^XT? 

1 ^TKTct 5 (cii-if r £ \zmWL9 X£fi5£LT*5 
<o £fc, ^O^&^X^ftDtc, *#J2 (03 
(e) ) Jc*rJ:5KW*^««fc^&a:*»«lill«S*a 

[0 0 16] cnSOflHSB^^X^WMW*^*** 

03 (f) iz^-rxofcTz-txmmmmY 3tw 0 

7*1rXHig«f*7 3Ktt, 41*yh7->^fA 

Ti^^T, m*-t£* 03 (f) fc^-r<fc-5fc:, ^X 
aico^l— ifi i\zrD^x<D±m^y bu—^yx^A 

1 ftCOT^-feXtgK^ DB^A f 5£077^fiI/50 1 

K*rr£#flB£H*r» 77^^5 0 2 \zNTz>mmfim 

t)fr& 0 Z<D£5\zlsT, ±T<D=l— tffc*rr£7^-tr 
XffiO!B««Sr— TcSarsA^ <fc 0 7 ir-feX 

»J», «*.«77^^5 0 3©l/3-F 5 0 3 1 (^*T 

nhm^m ifzw\z&~&z>h^o72ii 

X*«J»bfc^«^}C«> DBiJ— M5rt0>7i7-feXS9 

m&ffi&mz&^ttm&ztt. 03 (e) ic^-n-if 

*Era*R7 2^Stn«J;<, n.-ifl l<£>7#^> 
h;W¥JI»«*ft*»^K:B;. 0 3 (b) - (e) \z^~r^- 
-if1#$B7 l^i-if*IB*SB7 2^6ol— if 1 

tCn-ifCOACL^^SLTl^cvX^A^^T^, 
-1fW«<0«iE^***-n«K^BT*^*:Cl^S* 

[0 0 17] @4H ^mWlZ&rtZTZHXT-try H 
*ffl^fc*JW^«**'r>'--^r>X5 L ^-h , r»*. 7 
^-feX©Jfflit-A*5 O^T^-feX^^r^ h 7 5 SrfflV^ 
T» S6fC#»llfflA^51ffl*#*bfc7^'feX»JW*fi : 
5*«l3^^TKW"r-5. 04tc^-TJ:3tc, -tr+^7 
ffifi^-f 5 2tta— ifBSEHfflSr^Sb (14 

a) , a-iftti— tfBIEiaHlc: I c*- FftommtEE 

3 i <Dmm*AJj~? z> (i4b) o mmms i<Dmm& 

if 1 4©iEatt*tB»e>nfcatt, ^7^7>h20± 
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1 4CD7^-fe^*IS*aB'rSo 7 
^XftflWit—AS 0tC*fbT^--if 1 4CD7^irX« 
fgcD5giSS*^fT3<h (14c) , T^irX#J«lJ— A 
5 0ttJIS^;t6l:ACL*B*n (14d) o £ 
a— if 1 4#*#^-f 7> h 2 0*>S*s/ h*7 

7 5 aO^K^BS^S 1 7 PS STi ^5 — B##J&3ffl<£> 
«»Sfttt7 6*oM^t^«T»5. ZL(Dm^. 7 
^i?X3!ffiif-A5 Ote, ^^-T 7> h 2 OfflijCOT^-fe 
TsWm?^ 75 V 5 l fc, 7^i?x$fflit— A I D, 

-if 1 4<D:x-ifl8SiJ£, if 1 4<Z>ACL,S!l»* 
#7 6,*ct«7^"fe^#J**-/t5 0 
fllJS^nST^irX^^ry h 7 5 a*ffr£U 7^i?X 
SW^^U 5 lK2Hrr-6 (7 5 a) o 
Sif— /15 0t7mW»7<^7 U 5 1 i©H<Z)l 

U5 1H 7i7t7^y 5 a<Z)WS^B^lC7^ 
irXttWif— A5 OtCctoT^^tlAcfeCDTfe^Ci: 

[0 0 18] H4K45liT, 7^-feXMW^-f 7 

7'J 5 l^T^t^^ h 7 5 aSSttR^t, ^ 

< 7> h 2 0_h^^;i/-y^oiTy7 P U^r— ->3 

-if i 4\zMLxwmm^mm^m^T^> (Me) . 
;r©tO«»*lH«fcL a— if i 4 0acl»cS^M 

^n^feCOTf, OL-if 1 4ld*IB(Cffl : SnT^S*«ft: 
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